JWT Decoder
Paste a JWT to see its header and payload.
Verify signature
Decode and inspect your JWT: header, payload and signature. Optional HMAC verification.
common.info
JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.
jwt decoderhs256 hs384 hs512 verifybase64urldecode header payload signature
Examples and real-life use cases
- Inspect JWT claims during development and debugging.
- Verify HMAC signatures with a shared secret for HS256/384/512.
- Check exp/nbf validity and timezone interpretation.
FAQ
- Can I verify RS256?
- No, this tool verifies only HMAC (HS*) locally. Public/private key verification requires additional crypto APIs and key handling.
- Is my token sent to a server?
- No, decoding and verification run entirely in your browser.